严重
漏洞预警
CVE-2026-109618 (PHP2Shell) 漏洞深度复现与修复验证
本文复现 CVE-2026-109618 PHP2Shell OOM 堆破坏 RCE 漏洞，基于 Docker 靶场验证绕过 ASLR 的完整利用链，并对照官方补丁验证修复效果，总结复现坑点与安全加固方案。
RELATED
相关内容
高危
漏洞预警
CVE-2026-109618：PHP Memory Corruption Vulnerability
PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
CISA KEV
·
CVE-2026-109618
严重
漏洞预警
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Exploit-DB
·
CVE-2026-109618
严重
漏洞预警
Java 反序列化从 Redis 开始Rce
**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE
奇安信攻防社区
·
高危
漏洞预警
CVSS 8.3
CVE-2026-83594：Memory allocation with an excessive size value in Apache Wicket. org.a
Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUploadToResourceField uploads files to a separately mounted resource rather than through a form, and…
NVD
·
CVE-2026-83594